 |
There are currently 162 guest(s) and 78 member(s) online.
Welcome honored guest. You can register for free by clicking here.
|
We received
35944931
page views since June 2002
|
| |
[source: xorloser @ xorloser.com] This post will deal with the hardware required to trigger the PS3 hypervisor memory access exploit. The purpose of the hardware is to stop the PS3 from saving a change to a value that we don’t want changed. The PS3 saves this changed value by writing the value to RAM. Therefore in order to stop it from saving the changed value we need to stop this write from occurring. The PS3 sends the write command to the RAM over some control lines, so we interfere with these control lines when the write command is sent. The result we want is having the PS3 think it has successfully written the value to RAM, but the RAM didn’t receive the write command due to our interference and so it did not perform the write operation. The easiest (and moderately safe) way to interfere with these control lines is to ground them. This is done easily enough by connecting a wire between one of the control lines and ground. The tricky part is timing it just right so that it only interferes with the write we want to stop, and not anything that occurs before or after this write. This might be achievable with costly equipment and a lot of work, however geohot used the simple method of "luck". This involves repeatedly preparing the situation to best favour the chance of overwriting the correct write command and then continually grounding a control line until either something crashes that shouldn’t or the mark is hit stopping the write operation from occurring. At this point the exploit has been successfully triggered! :)
|
Posted on Sunday, February 07, 2010 @ 15:33:42 GMT (621 reads)
(Read More... | 9484 bytes more | 3 comments | Score: 5)
|
|
|
[source: xorloser @ xorloser.com] As I’m sure everybody heard, the memory access exploit for the PS3 hypervisor was released recently by geohot. I was finally able to replicate his hack so I thought I’d take the time to help out others who may also have trouble due to being linux n00bs like me :) If I were to post everything at once it would be too much work and I’d never get around to it, so I’ll post bits at a time to ensure I actually do post it heh. Today’s post will talk about the software side of the exploit.
|
Posted on Friday, February 05, 2010 @ 10:20:59 GMT (990 reads)
(Read More... | 5129 bytes more | comments? | Score: 5)
|
|
[source: garyopa @ psx-scene.com] A couple days ago PSPJOKE over at LAN.ST had started a thread, regarding a Game Save Crash, and unlike previous claims to fame of fancy YouTube videos and nothing being released or work on. This one seems to be aimed in the right direction, and hopefully the end result will be a working exploit for the newer PSP firmwares like the v6.20 on the PSP-GO. For now, you can read thru the open discussion over at LAN.ST.
|
Posted on Friday, February 05, 2010 @ 03:25:14 GMT (291 reads)
(... | comments? | Score: 0)
|
|
modrobert writes: "GodzIvan has refined his work on the Xbox 360 NAND flash write protection (see previous story) and developed a digital switch called NWP CHIP where you simply use the DVD eject button to toggle protection. The only parts required are a PIC12F629 microcontroller and a bi-color LED. Thanks for sharing!"
|
|
modrobert writes: "I got this tip from carranzafp about an interesting Xbox 360 RROD solution and deal over at dynamodz.com (the site is Dutch but has Google Translate function). The deal includes a custom version of Team Hybrid's Ultimate X-Clamp Fix along with a bonus Xbox360 ToolKit (to open the case). "
|
[source: carranzafp @ 360xtractorpro.com] INTRODUCING THE NEW ACCESSORY FOR XTRACTOR: "VAMPIRE". This device will help professional installers to do the Firmware reading on the latest Liteon drives (83850V2 & 93450). Its based on the MRA concept and 100% compatible with all Xtractor units, it connects directly on the Xtractor pin port. It came with 2 visual indicators, one for polarity check and other for Vendor Mode. This device release could confuse some people because we just released Litekey. But the reason is simple, Litekey is intended for end users who want to install a device on their drives that simplify their lives on future updates without having to re-open the drive, their main worry is about enjoying the console, they should not be bothered about plugging, wiring, switching, every time they update.
|
Posted on Saturday, January 30, 2010 @ 06:56:40 GMT (611 reads)
(Read More... | 1799 bytes more | 3 comments | Score: 0)
|
|
modrobert writes: "I stumbled across some info over at wiinewz.com about SNEEK; a software project started by crediar which redirects all NAND flash access on a Nintendo Wii to an SD card and it also brings its own ES module which allows unsigned content to be installed. You can find the source code over at Google Code and there is an interesting forum thread over at gbatemp.net."
|
Posted on Friday, January 29, 2010 @ 07:04:01 GMT (277 reads)
(... | comments? | Score: 0)
|
|
modrobert writes: "After a couple of days of hacking geohot has released his PS3 exploit to the public which includes source code, glitch point diagram and instructions. Quote geohot: 'In the interest of openness, I've decided to release the exploit. Hopefully, this will ignite the PS3 scene, and you will organize and figure out how to use this to do practical things, like the iPhone when jailbreaks were first released. I have a life to get back to and can't keep working on this all day and night.' You can read the whole post and more over at geohot's ps3 blog, but please try to ignore the comments and do something creative instead, like using the exploit to dump interesting stuff. ;)
 "
Note: EurAsia forum topic here.
|
[source: geohotps3.blogspot.com] I have read/write access to the entire system memory, and HV level access to the processor. In other words, I have hacked the PS3. The rest is just software. And reversing. I have a lot of reversing ahead of me, as I now have dumps of LV0 and LV1.
3 years, 2 months, 11 days...thats a pretty secure system
Note: EurAsia forum topic here.
|
Posted on Saturday, January 23, 2010 @ 04:07:16 GMT (1905 reads)
(Read More... | 1095 bytes more | 3 comments | Score: 5)
|
|
[source: cygnos360.com] First of all, happy new year to everyone and welcome to 2010. Looks like it’s going to be a good year for Xbox 360 enthusiasts with all those neat applications coming in on almost a daily basis now. We have not held a winter sleep either and continued to further improve the Cygnos360 V2. We have made major improvements to our Cygnos360 v2 Firmware which is now in 1.03 final. (you can get it here) We have significantly increased the flashing speed for 16Mb xbox 360 NANDs.
With the new firmware v1.03, programming takes 24 seconds and reading 28 seconds. That is a full image, not a partial!
|
Posted on Friday, January 22, 2010 @ 06:28:41 GMT (404 reads)
(Read More... | 3113 bytes more | 1 comment | Score: 0)
|
|
[source: lt.nfo @ LiteOn_iXtreme_LT.rar] After a long development and testing process we give you the first official release of the iXtreme LT.
- Supports all Liteon Drives (74850, 83850V1, 83850V2, 93450)
- Totally re-written code optimised for minimal patching
- Whole banks of firware now untouched
- New Drive response timing engine accurately mimics original drive timings
- Full disc stealth used by default
- Waveless booting , disc images are assumed to be correct!
- Split-Vid used as default
|
Posted on Wednesday, January 20, 2010 @ 07:34:37 GMT (1307 reads)
(Read More... | 1306 bytes more | comments? | Score: 5)
|
|
|
Anonymous writes: "June last year, it was announced that the Fatal Frame IV translation team were working on -- you guessed it; A Fatal Frame IV English translation for Wii. The team is happy to announce it has finally been released!"
|
Posted on Monday, January 18, 2010 @ 07:31:21 GMT (361 reads)
(... | comments? | Score: 0)
|
|
modrobert writes: "geohot (aka George Hotz) has been busy setting up a custom SPI interface for the PS3 Cell processor in order to basically remap a region of the hypervisor protected memory to overlap SPU memory in userland using his FPGA setup. You can find more information in his ps3 blog and updates via twitter. I suspect the goal of the hack is to execute his own code in protected memory without interference from the hypervisor.
 "
|
|
modrobert writes: "Team Jungle has found new checks Microsoft can use for banning purposes according to their twitter post which affects all firmwares except LT. I guess we can expect new iXtreme releases shortly."
|
modrobert writes: "Brakken over at tehskeen.com has closed down his network of websites due to circumstances out of his control. I don't know if that means the site was hacked and data was lost or something else. This is not the first time the sites goes down, so I for one hope this downtime is just temporary. Read on for Brakken's statement..."
|
Posted on Wednesday, January 13, 2010 @ 05:42:24 GMT (833 reads)
(Read More... | 1157 bytes more | 5 comments | Score: 0)
|
|
|
[source: wiikey.cn] Wiikey Fusion, as many will know, has been the buzz of the Wii modding community for several months now. This revolutionary new way to mod a Wii to enable backups to be played from SD card has caused a lot of excitement and anticipation. At the same time, a lot of people have emailed us to voice their frustration over how long its taking. When we first announced Wiikey Fusion back in September 2009, we did not think that it would take quite this long to launch. Initially, we had October 2009 as a preliminary launch date. However, introduction of a new protections in the form of a previously unused DI command (BCA read) in a recently released game forced us to reconsider the Wiikey Fusion architecture. While implementing BCA read emulation is quite straightforward there are several other Wii/Gamecube specific commands that potentially could be used in future protections.
|
Posted on Monday, January 11, 2010 @ 17:34:24 GMT (544 reads)
(Read More... | 1507 bytes more | 1 comment | Score: 0)
|
|
|
[source: xbox-scene.com] Trancy released a new version of XBR-Flash. With LFlash it was already possible to update your XBReboot on NAND-16mb consoles directly from your Xbox 360 booted into a Linux Distro like Gentoo (so no need to flash over LPT or USB again). Based on LFlash, XBR-Flash however will now allow you to flash on 256/512mb consoles as well and v0.2 comes with more additional features.
|
Posted on Monday, January 11, 2010 @ 04:04:49 GMT (470 reads)
(Read More... | 1812 bytes more | comments? | Score: 0)
|
|
|
modrobert writes: "Bushing has posted a wrap up of the Chaos Communication Congress (26C3) over at hackmii.com. The majority of Team Twiizers were there including tmbinc (Felix Domke) who also gave a speech on 'Blackbox JTAG Reverse Engineering'."
|
Posted on Saturday, January 09, 2010 @ 08:01:56 GMT (326 reads)
(... | comments? | Score: 0)
|
|
[source: team-xecuter.com] After a great deal of requests we have designed a simple switch for all the Liteon drives that enables firmware full read/write. We have also included an On/OFF Led to show correction operation when switching to 0×72 vendor mode. The installation is very simple and takes about 60 seconds if you have some small experience with a soldering iron. It has been tested with the original DOSFLASH methods and also the new Jungle Flasher 0.1.69. All Liteon drive version have been tested with 100% Success. There is no need to remove the LT Switch after it has been installed – simply switch to normal mode.
|
|
modrobert writes: "Dark Mod over at wiinewz.com has checked out SUNDRIVER by D2SUN Team. The review also includes videos of the device in action. Random quotes: 'All I can say is WOW......the red PCB is so simple, with the legendary actel 3 chip the spi in the corner and underneath, the HDD controller and what not....thumbs up to that. the install of the harddrive is very easy, just angle it and slide in the port and screw the side with the two necessary screws and the installation of it to the wii is just like putting back the wii drive in.....nothing fancy, anyone can do it, I literally let my seven year old cousin install the sundriver for me while I was downloading the menu software.....lol. The only tiny setback she had was the aligning of the USB and switches to the front slot, as it was bend. Need to correct that issue D2sun I used some nylon washers to align it properly and she fit beautifully.'"
|
Posted on Wednesday, January 06, 2010 @ 12:20:32 GMT (573 reads)
(... | comments? | Score: 0)
|
|
|
modrobert writes: "Brakken has tested WODE JUKEBOX and published a review over at iso420.org. Partial quote from the conclusion: 'If you're looking for perfection and have the money to spend then the WODE is something to consider, but if you're a cheap pirate who risks his Wii every time he installs a new update to play a game then I just feel sorry for you.'"
|
Posted on Tuesday, January 05, 2010 @ 05:06:45 GMT (514 reads)
(... | comments? | Score: 0)
|
|
|
modrobert writes: "TeamXBR along with talented members of xboxhacker.net has been active with XBReboot lately and managed to fix the freezing/lagging issues when playing games from the Xbox 360 hard drive. Also several other bug fixes for the supported motherboards makes XBReboot stable enough to please most users. I think there will be lots of people attempting the JTAG Hack in the near future. If you need help to get started there are tutorials available in the download section. Just keep in mind that you shouldn't connect to live using the hacked kernel, unless you want to be banned. "
|
Posted on Sunday, January 03, 2010 @ 08:05:11 GMT (724 reads)
(... | comments? | Score: 0)
|
|
[source: gbarl.it via Brakken @ tehskeen.com] Nintendo has rolled out a new firmware revision for their latest incarnation of their line of Nintendo DS portable video gaming consoles. It seems v1.5 of their firmware blocks flashcards again which means you can either turn on off the Wifi or wait for a fix. Not is much known about other enhancements other then the anti-flashcard fix.
|
Posted on Wednesday, December 30, 2009 @ 05:25:26 GMT (1410 reads)
(Read More... | 934 bytes more | 1 comment | Score: 1)
|
|
|
modrobert writes: "You can find the official WODE Jukebox review over at wiinewz.com. This was released before the actual product so I guess it is more of a preview."
|
Posted on Monday, December 28, 2009 @ 08:34:19 GMT (751 reads)
(... | comments? | Score: 0)
|
|
Greetings from EurAsia. We wish you a Merry Christmas! Where I'm from people celebrate on the 24th with good food, presents from Santa and such. The 25th is for church and recovery from hangover, though most people skip church these days. Following the tradition here at EurAsia we hope our registered members can link the images needed to set the holiday spirit right!
|
Posted on Thursday, December 24, 2009 @ 06:29:49 GMT (190 reads)
(... | comments? | Score: 0)
|
|
[source: ccc.de] The 26th Chaos Communication Congress (26C3) is the annual four-day conference organized by the Chaos Computer Club (CCC). It takes place from December 27th to December 30th 2009 at the bcc Berliner Congress Center in Berlin, Germany. The Congress offers lectures and workshops on a multitude of topics and attracts a diverse audience of thousands of hackers, scientists, artists, and utopians from all around the world. The 26C3s slogan is "Here Be Dragons".
|
Posted on Tuesday, December 22, 2009 @ 11:06:15 GMT (338 reads)
(Read More... | 2275 bytes more | comments? | Score: 0)
|
|
|
[source: wiikey.cn] After a solid week of beta testing (thanks to our distributors and Xavbox) we are pleased to announce the release of v1.3 ('Odyssey') of the Wiikey 2 firmware. This is a DVD update which can be downloaded and applied immediately. This fix includes a hardcoded BCA for NSMB which will allow owners of original copies of this game to play their backups without any issues. There is no need to apply a patch to the .iso.
|
Posted on Wednesday, December 16, 2009 @ 20:54:50 GMT (1085 reads)
(... | comments? | Score: 0)
|
|
|
[source: wasabi.net.cn] For the past few weeks we've been working hard on a fix for the new BCA protection used by games such as NSMB. As Wasabi DX not only supports regular plug&play install but also 6 wires install, we decided not to release anything until we had a fix for both modes. What we didn't expect were the many problems we faced implementing the fix for 6 wires mode, that took much more time than expected to solve. In the future we plan to release separate upgrades for DX and other Wasabi models to avoid such delays, as requested by many of you. Now for the good news. New firmwares for every Wasabi versions are now available in the Downloads section. We're proud to be the first team to release a fix for old non plug&play chips as well.
|
Posted on Wednesday, December 16, 2009 @ 07:38:06 GMT (501 reads)
(Read More... | 2746 bytes more | comments? | Score: 0)
|
|
|
modrobert writes: "Sony has released PS3 Firmware Update v3.15 via PSN. Quote Eric Lempel @ Sony: 'This is an optional update, and it enables existing PS3 owners who purchase a new PS3 system (perhaps as a second unit for the household) to transfer their content from their current PS3 to the new system. Content such as games, game save data, and videos downloaded from PlayStation Network can be transferred to the new PS3 system and deleted from the current PS3 system.' Check this topic in the ps3 tech forum for hacking related info (don't hold your breath) and download links. I have updated the Ps3OsRels wiki as usual."
|
Posted on Thursday, December 10, 2009 @ 06:23:08 GMT (474 reads)
(... | comments? | Score: 0)
|
|
| |
|
Don't have an account yet? You can create one. As registered user you have advantages like access to our download section, member forums, private messages, post stories with your name and more.
|
|
|
